0xeb-bp / cve-2020-1054

LPE for CVE-2020-1054 targeting Windows 7 x64
86 stars 30 forks source link

Hi, I run the exploitation code but it failed. It show me that "Error finding winlogin.exe pid". #2

Open d3light4 opened 4 years ago

d3light4 commented 4 years ago

Hi, I run the code as your description on windows 7 x64 ultimate. But it failed at "Error finding winlogin.exe pid".

CVE-2020-1054 LPE written by @0xeb_bp

[+] Pid = 2664 [+] Token Handle = 48 [+] PID Token Address = fffff8a00b2aba30 [+] PID Token Privilege Address = fffff8a00b2aba70 [+] Base Bitmap Handle = 360501e4 [+] Base Bitmap Surface Obj Address = fffff900c6800000 [+] Generating Bitmaps... [+] Surf Obj to OOB overwrite the size = fffff901c6870000 [+] Surf Obj to overwrite pvScan01 = fffff901c68e0000 [+] GetBitMapBits/Reading using oob_target... [+] SetBitmapBits/Overwriting pvScan0... [+] Overwrote pvScan01 (SetBitmapBits returned 6f000 bytes) [+] Overwriting token priviliges [+] Overwrote token privileges (SetBitmapBits returned 18 bytes) [+] Searching for winlogon.exe PID [-] Error finding winlogin.exe pid

Could you please tell me how to fix this problem? Thanks.